-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 May 2019 22:34:35 +0200
Source: bind9
Binary: bind9 bind9utils bind9-doc host bind9-host libbind-dev libbind9-140 libdns162 libirs141 libisc160 liblwres141 libisccc140 libisccfg140 dnsutils lwresd libbind-export-dev libdns-export162 libdns-export162-udeb libisc-export160 libisc-export160-udeb libisccfg-export140 libisccc-export140 libisccc-export140-udeb libisccfg-export140-udeb libirs-export141 libirs-export141-udeb
Architecture: all
Version: 1:9.10.3.dfsg.P4-12.3+deb9u5
Distribution: stretch-security
Urgency: high
Maintainer: all Build Daemon (x86-bm-01) <buildd_all-x86-bm-01@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-doc  - Documentation for BIND
 bind9-host - Version of 'host' bundled with BIND 9.X
 bind9utils - Utilities for BIND
 dnsutils   - Clients provided with BIND
 host       - Transitional package
 libbind-dev - Static Libraries and Headers used by BIND
 libbind-export-dev - Development files for the exported BIND libraries
 libbind9-140 - BIND9 Shared Library used by BIND
 libdns-export162 - Exported DNS Shared Library
 libdns-export162-udeb - Exported DNS library for debian-installer (udeb)
 libdns162  - DNS Shared Library used by BIND
 libirs-export141 - Exported IRS Shared Library
 libirs-export141-udeb - Exported IRS library for debian-installer (udeb)
 libirs141  - DNS Shared Library used by BIND
 libisc-export160 - Exported ISC Shared Library
 libisc-export160-udeb - Exported ISC library for debian-installer (udeb)
 libisc160  - ISC Shared Library used by BIND
 libisccc-export140 - Command Channel Library used by BIND
 libisccc-export140-udeb - Command Channel Library used by BIND (udeb)
 libisccc140 - Command Channel Library used by BIND
 libisccfg-export140 - Exported ISC CFG Shared Library
 libisccfg-export140-udeb - Exported ISC CFG library for debian-installer (udeb)
 libisccfg140 - Config File Handling Library used by BIND
 liblwres141 - Lightweight Resolver Library used by BIND
 lwresd     - Lightweight Resolver Daemon
Closes: 922954 922955 927932
Changes:
 bind9 (1:9.10.3.dfsg.P4-12.3+deb9u5) stretch-security; urgency=high
 .
   [ Marc Deslauriers (Ubuntu) ]
   * CVE-2018-5743: limiting simultaneous TCP clients is ineffective.
     Thanks to Marc Deslauriers of Ubuntu (Closes: #927932)
 .
   [ Ondřej Surý ]
   * Sync Maintainer and Uploaders with unstable
   * [CVE-2019-6465]: Zone transfer for DLZs are executed though not
     permitted by ACLs. (Closes: #922955)
   * [CVE-2018-5745]: Avoid assertion and thus causing named to
     deliberately exit when a trust anchor's key is replaced with a key
     which uses an unsupported algorithm. (Closes: #922954)
Checksums-Sha1:
 5440a3fe58c97dee2d273bb2329b25e25759f3c3 378720 bind9-doc_9.10.3.dfsg.P4-12.3+deb9u5_all.deb
 09698947c5e6613b82ec373932c64d041ea2c37d 7939 bind9_9.10.3.dfsg.P4-12.3+deb9u5_all.buildinfo
 933a228bd450e7cc27bef262fab9aeaff1d7ab4a 185870 host_9.10.3.dfsg.P4-12.3+deb9u5_all.deb
Checksums-Sha256:
 7062a9aaabcff8076364a9edb76de151bbea99a20f2a4c16d8deff525f93f27c 378720 bind9-doc_9.10.3.dfsg.P4-12.3+deb9u5_all.deb
 fcf8e75e9e346aca51a79c94fb5e5b34781bf69d9e7e3850835b3a3d0e3b0c3c 7939 bind9_9.10.3.dfsg.P4-12.3+deb9u5_all.buildinfo
 545125b00b49a1ab93e011f47d9b12f44f27225212f4fb00dcb9d48770a24ef4 185870 host_9.10.3.dfsg.P4-12.3+deb9u5_all.deb
Files:
 248381f849ce0d071c8db0fb865aa4ea 378720 doc optional bind9-doc_9.10.3.dfsg.P4-12.3+deb9u5_all.deb
 ddba25ba00f534328359a8ab58a96ab9 7939 net optional bind9_9.10.3.dfsg.P4-12.3+deb9u5_all.buildinfo
 30c65a435ca96b1263066ef877dc407c 185870 net standard host_9.10.3.dfsg.P4-12.3+deb9u5_all.deb

-----BEGIN PGP SIGNATURE-----
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=RFOJ
-----END PGP SIGNATURE-----